CVE-2023-27976: Schneider Electric Ecostruxure Control Expert

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause remote code execution when a valid user visits a malicious link provided through the web endpoints. Affected Products: EcoStruxure Control Expert (V15.1 and above)

Affected products

• Schneider Electric Ecostruxure Control Expert: from 15.1

Published 2023-04-18. Last modified 2026-06-17.